BM Zenith Investment Limited review.

Overview

BM Zenith Investment Limited is a Cyprus Investment Firm holding CySEC licence 445/24, granted on 17 June 2024. The licence is real and it is current. We read it on CySEC’s own register on 29 July 2026, and we confirmed the domain twice over: CySEC’s List of Approved Domains carries www.bmzenithinvestment.com against this licensee at entry 33, and the firm’s own archived legal text says “This website (www.bmzenithinvestment.com) is operated by BM Zenith Investment Ltd, a Cyprus Investment Firm, authorized and regulated by the Cyprus Securities and Exchange Commission with CIF licence number 445/24”. The regulator and the firm agree on who owns this domain, which settles the identity question a reader normally cannot answer alone.

The website is gone. We requested both hostnames through exits targeted at eleven countries, Indonesia, Thailand, Vietnam, Azerbaijan, Singapore, Japan, India, the United Arab Emirates, South Africa, the United Kingdom and Germany, four attempts each. All 22 country and hostname pairs came back as a refusal from the origin itself rather than a block on our proxy. We checked that the routing was real rather than nominal, and we checked it the hard way: asking the proxy where it had put us would only report what we had asked for, so we spot checked each exit against two independent geolocation services instead. Both services agreed the exit was in the country requested in every case, nine of the eleven on the first pass and the remaining two on a retry after one service returned an empty answer. The apex redirects to www.bmzenithinvestment.com, which answers HTTP 530 with Cloudflare error 1016, an origin DNS error, meaning Cloudflare can no longer resolve the server it is meant to forward traffic to. We also probed both hostnames directly over http and https, and the answer never changed.

It did once exist, and what it was is as revealing as what it is now. The Internet Archive holds captures from 9 August 2024, the day the domain was registered, through 3 April 2025. The 2024 capture is a placeholder reading “Coming Soon”. From October 2024 the site was a five destination brochure covering Home Page, About Us, Our Services, Legal Information and Contact Us, and it named no platform, no instrument list, no price, no minimum deposit, no payment method and no email address. It carried a working phone number only from February 2025. There was never a client login link.

The trading business appears to have come later and left quickly. Certificate Transparency logs show platform.bmzenithinvestment.com first appearing on 14 August 2025, four months after the last archived page. We resolved that hostname ourselves: it is a CNAME to zenithmtr-hanabi.match-trade.com, a Match-Trade Technologies white label instance. That target now returns NXDOMAIN, while match-trade.com itself resolves normally, so it is this firm’s instance that has been taken down rather than the vendor. Someone is still paying for the domain: a wildcard certificate was issued on 14 July 2026, and mail runs on Microsoft 365.

Overview Table

Facts List

• CySEC licence 445/24, licence date 17 June 2024, entity BM Zenith Investment Limited.
• Cyprus company HE 406814, incorporated 6 February 2020, status Registered at the Cyprus Registrar of Companies, file last updated 13 July 2026.
• The company was previously named BM Zenith Investment Advisors Limited, and the licence grants no investment advice permission.
• ESMA lists the firm as Active, record ae49356, LEI 213800VDRK6EDHETI619, authorisation date 17 June 2024.
• Investment services granted: reception and transmission of orders, and execution of orders on behalf of clients. Both on instrument class 9 only.
• Dealing on own account is not granted, so the firm is not permitted to be the counterparty to your trade.
• Ancillary permissions: safekeeping and administration of financial instruments on class 9, granting credits or loans on class 9, and foreign exchange services connected to investment services.
• The approved domain returned Cloudflare error 1016 on all 22 proxied country and hostname pairs we tried, from exits confirmed in all eleven countries by two independent geolocation services, and on every direct probe.
• The archived site carried CySEC’s Section E standard risk warning, the wording reserved for a provider with no open retail CFD positions in the previous twelve months.
• platform.bmzenithinvestment.com is a dangling CNAME to a Match-Trade Technologies host that no longer resolves.
• crm.bmzenithinvestment.com answers HTTP 403 behind a Cloudflare Access gate and serves the public nothing.
• Not on CySEC’s Former Investment Firms list, not on the List of Non Approved Domains, and not named in CySEC’s warnings.

Key Takeaways

• The licence is genuine and current. CySEC 445/24 names BM Zenith Investment Limited, and both CySEC’s approved domains list and the firm’s own archived legal page tie bmzenithinvestment.com to that licensee, so this is not a clone using a real firm’s number.
• The website is dead everywhere, not just from here. Requests to both hostnames through exits confirmed in eleven countries, and direct probes from our own machine, all returned Cloudflare error 1016 from the origin.
• The licence covers CFDs and nothing else. Instrument class 9 is the only class granted, on both of the two services the firm holds.
• BM Zenith holds no dealing on own account permission, so it cannot lawfully take the other side of your trade. Its own site said all services were “provided on an execution only basis”.
• The counterparty is therefore someone else, and the firm never named a liquidity provider or execution venue. That remains the most useful missing fact about this firm.
• Its own risk warning points the same way without proving it. The archived site used CySEC’s standard wording rather than a provider specific percentage, which is the format prescribed for a firm without twelve months of retail client trading data. BM Zenith was such a firm in October 2024, so this is consistent with little or no retail activity rather than proof of it.
• A Match-Trader white label platform went live around August 2025 and has since been decommissioned, leaving a subdomain pointing at a host that no longer exists.
• The corporate shell is still being paid for. A wildcard certificate was issued on 14 July 2026 and two separate mail systems are configured, while the origin behind the retail facing domain answers nothing.

Licenses & Regulation

We verified this at CySEC directly rather than through any intermediary, using a plain browser request because Bright Data classifies cysec.gov.cy as a government site and refuses it. BM Zenith Investment Limited appears on the current register of Cypriot Investment Firms, one of the 248 firms listed there on 29 July 2026.

Read the instrument classes rather than the label. CySEC’s own popover on that register page defines class 9 as “Financial contracts for differences”. BM Zenith is granted class 9 and no other class, which means the CFD category is correct for this firm and also means nothing outside CFDs is authorised. There is no class 1 for transferable securities, so no shares or bonds, and no class 4 for the ordinary derivative contracts on currencies, interest rates and indices. Whatever this firm marketed, its permission is CFDs alone.

The second reading matters more. The register lists two investment services and neither is dealing on own account. A firm without that permission is not allowed to be your counterparty. It receives and transmits orders, and it executes orders on your behalf as your agent into somebody else’s book. That is genuinely better for a client than the usual arrangement, because the firm does not profit when you lose, and the firm’s own site said as much: “BM Zenith Investment Ltd is not a financial adviser and all services are provided on an execution only basis”. The risk simply moves. The party taking the other side is a third party whose identity, regulator and financial standing were never disclosed. A functioning broker names its execution venues in a best execution policy. This one published no such policy on any page the Internet Archive holds.

One claim we tested and rejected deserves recording, because it would have been unfair. The archived site’s risk warning reads “The vast majority of retail investor accounts lose money when trading CFDs”, with no firm specific percentage, and that looks at first glance like a breach of the disclosure rules. It is not. We read CySEC policy statement PS-04-2019 and found that exact sentence prescribed as the Section E standard risk warning, and paragraph 7 of the same annex requires it: a provider that “has not provided an open CFD connected to a retail client CFD trading account” during the last twelve month calculation period must use the standard wording instead of the provider specific percentage. So the warning was correct rather than defective. What it implies needs more care than we first gave it. The operative annex reaches Section E only through paragraph 7, which covers a provider that has not had an open retail CFD position in the period. But CySEC’s explanatory paragraphs 3.5.10 and 3.5.11 describe the same substitution as the wording for “new firms that do not have 12 months of retail client trading data”, and repeat that at 5.2 and 5.3. BM Zenith was licensed in June 2024 and published this page in October 2024, so it was a newcomer on any reading. The honest conclusion is that the wording is consistent with little or no retail CFD activity, and that we cannot separate the dormant reading from the newcomer reading on this evidence alone.

We checked what is absent as carefully as what is present, and we distinguish between what we searched and what we could not reach. BM Zenith is not on CySEC’s Former Investment Firms list, so the licence has not been withdrawn or renounced. It is not on the List of Non Approved Domains, where the only similar entry is zenithoptions.net from 13 December 2016, an unrelated firm predating this company. It is not named on CySEC’s warnings page, and the register record carries no suspension, condition or wind down flag. We then swept CySEC’s enforcement output rather than relying on the register alone: all 1,152 board decisions from 2014 to 2026, all 1,594 announcements from 2005 to 2026, and all 415 administrative sanctions from 2012 to 2024, including the Greek language sanctions list that the English page only points to. BM Zenith appears in none of them. Two limits on that sweep are worth stating: it matched listing titles and metadata rather than the full text of every linked PDF, and the sanctions list itself stops at 2024, so the clean 2025 and 2026 record rests on the board decisions rather than on the sanctions list.

Three further sources corroborate the position. ESMA’s register of investment firms carries BM Zenith Investment Limited as Active, record ae49356, with LEI 213800VDRK6EDHETI619, competent authority CySEC and an authorisation date of 17 June 2024 matching the Cypriot record exactly. The Cyprus Registrar of Companies lists HE 406814 as Registered, incorporated on 6 February 2020, with annual returns filed for 2020 through 2024, a further filing lodged on 7 May 2026 and the file updated on 13 July 2026. The registrar also shows a previous name, BM Zenith Investment Advisors Limited, which is worth noting given that the licence grants no investment advice permission. We searched the FCA register for BM Zenith, BM Zenith Investment, BM Zenith Investment Limited, BM Zenith Investment Advisors and Zenith Investment, and found nothing at all, which here means no clone entry and no unauthorised firm trading on this name. We could not reach IOSCO’s investor alerts portal, which returned 403 on every attempt, so we record that as not checked rather than as clean.

One inference we tested against a control, because getting it wrong either way would mislead. CySEC does publish branch and cross border data where it exists: the record for XTB Ltd renders a populated Branch in Member States block naming a Czech Republic office at Pobrezni 12, Praha, and a Cross Border Services list. On BM Zenith’s record those regions are unrendered template comments, and there is no cross border services list at all. So the emptiness here is a real signal rather than a quirk of the page, and it agrees with ESMA, which holds a head office record for this firm and no branch record. The Tied Agents block is empty on both records, so we draw nothing from that one.

How to Trade

You cannot, by any route we could find. The origin behind the approved domain serves no page, so there is no web platform, no download and no account area reachable by a prospective client. To be precise about what is and is not served: robots.txt returns HTTP 200 with 1,836 bytes, but that file is generated by Cloudflare’s edge rather than by the firm, and it is Cloudflare’s managed boilerplate. Every path that would carry the firm’s own content returns 530.

What the firm ran is nonetheless knowable, from infrastructure rather than from marketing. Certificate Transparency logs record platform.bmzenithinvestment.com appearing on 14 August 2025. We resolved that hostname ourselves and it is a CNAME to zenithmtr-hanabi.match-trade.com. Match-Trade Technologies supplies the Match-Trader platform as a white label to brokers, and the naming follows its convention. The target host now returns NXDOMAIN while match-trade.com resolves normally, so the vendor is operating and this broker’s instance has been removed. That leaves a subdomain of a licensed firm pointing at a hostname that no longer exists, which is loose infrastructure hygiene as well as a sign of a shutdown.

Two further subdomains, dev and sta, appeared on 4 September 2025 and now answer with Cloudflare 403, and a wwv host returns an nginx 503. The only web application that responds at all is crm.bmzenithinvestment.com, which sits behind a Cloudflare Access gate and returns HTTP 403 with the message “Forbidden. You don’t have permission to view this.” A member of the public does not reach a login form there. We probed it three times directly and through exits in Indonesia, Thailand, Singapore, the United Arab Emirates, the United Kingdom and Germany, and it never served content.

The licence describes the shape of the service if it resumes. BM Zenith holds reception and transmission of orders, the permission to take an order and pass it to another firm, and execution of orders on behalf of clients, the permission to work that order as your agent. Both are limited to class 9, contracts for differences. It holds no portfolio management and no investment advice, so nobody at this firm is authorised to manage money for you or recommend a trade. It also holds granting credits or loans on class 9, which is the margin lending permission that makes leveraged positions possible. Cyprus caps retail CFD leverage under PS-04-2019 at 30:1 on major currency pairs, 20:1 on non major pairs, gold and major indices, 10:1 on other commodities and non major equity indices, 5:1 on individual equities and 2:1 on cryptocurrencies. What BM Zenith offered inside those ceilings was never published.

Account Types

Nothing was ever published. There is no account comparison, no minimum deposit, no tier structure, no swap free option and no professional client route on any page the Internet Archive holds, and none on the live site because there is no live site.

This is worth separating from the ordinary case of a broker whose site is merely down. The archived brochure, captured five times between August 2024 and April 2025, described the business in a single sentence: “We specialize in delivering Contracts for Difference (CFDs) trading services to individual and institutional investors.” It named no account, no deposit figure and no commercial term of any kind. The gap in this review is not an artefact of the outage. The information was not there when the site worked.

We have left the minimum deposit, minimum order size, minimum spread and account opening time fields empty in our data rather than carry a plausible looking number. A figure invented for completeness is the exact harm this catalogue exists to prevent.

The regulatory frame any BM Zenith account would sit inside is knowable even though the accounts are not. As a Cyprus Investment Firm it must categorise clients as retail, professional or eligible counterparty under MiFID II, and the retail category carries the leverage caps, the margin close out rule and negative balance protection described below. Firms may offer an elective professional classification that removes those protections. Whether BM Zenith did so, and on what tests, was never disclosed. It holds safekeeping and administration of financial instruments on class 9, the custody permission that sits behind segregated client money at a CIF, though a permission on a register is not evidence that client money is currently held and reconciled.

Negative Balance Protection

BM Zenith published no terms of business, so we cannot quote its own negative balance clause. What we can state is the rule that binds it as a Cyprus Investment Firm, taken from CySEC policy statement PS-04-2019 of 27 September 2019, which we read directly rather than second hand.

That policy statement defines negative balance protection as “the limit of a retail client’s aggregate liability for all CFDs connected to a CFD trading account with a CFD provider to the funds in that CFD trading account”. In plain terms, a retail client of a CIF cannot lose more than the money in the account. It applies on a per account basis, so a loss on one account is not supposed to reach across into another.

The same measures impose a margin close out rule, defined as the closure of one or more of a retail client’s open CFDs when the sum of funds in the account and the unrealised net profits of all open CFDs falls to less than half of the total initial margin for those positions. That 50 percent threshold exists to close a position before the account goes negative rather than after.

Two cautions. These protections attach to retail clients and not to clients reclassified as professional, and reclassification is a route some firms encourage. And a protection you cannot read in a contract is a protection you cannot enforce by pointing at a clause. For a firm whose documents were never published and whose site is now unreachable, the regime is the floor and the firm’s own terms, which normally sit on top of it, are simply unknown.

Trading Instruments

This is where the register is unusually informative, because the instrument classes on a CySEC record define the outer boundary of what a firm may legally offer, whatever its marketing says.

BM Zenith is granted instrument class 9 on reception and transmission of orders, and class 9 on execution of orders on behalf of clients. CySEC’s own definition of class 9, in the popover on the register page, is “Financial contracts for differences”. No other class appears against either service.

The consequences are concrete. Class 1, transferable securities, is not granted, so BM Zenith cannot offer real shares, bonds or exchange traded funds. Class 3, units in collective investment undertakings, is not granted, so no funds. Class 4, covering options, futures, swaps and other derivative contracts on securities, currencies, interest rates and financial indices, is not granted, so no ordinary futures or options business. Classes 5 to 8, covering commodity derivatives and credit risk transfer instruments, are not granted. Classes 10 and 11, covering exotic derivatives and emission allowances, are not granted.

What remains is CFDs. A CFD can reference a currency pair, an index, a commodity, a share or a cryptocurrency, so the range of underlyings available under class 9 alone can still be wide. What we cannot tell you is which underlyings BM Zenith actually listed, how many symbols it carried, or what its contract sizes and trading hours were. Its own site said only that it delivered “Contracts for Difference (CFDs) trading services to individual and institutional investors”, with no asset class breakdown anywhere. We have left our instruments field empty rather than infer a product list from a permission, because a permission describes what is allowed and not what is offered.

Education & Analysis

There is nothing to review, and there never was. Across the Internet Archive’s captures of bmzenithinvestment.com from 9 August 2024 to 3 April 2025, no research note, market commentary, economic calendar, webinar, video library, glossary or demo account appears. The whole site ran to five destinations: Home Page, About Us, Our Services, Legal Information and Contact Us. Nothing is reachable now.

That absence has a regulatory edge as well as a commercial one. CySEC licence 445/24 grants BM Zenith two services only, reception and transmission of orders and execution of orders, and grants neither investment advice nor portfolio management. The firm is therefore not authorised to make recommendations, and its own Legal Information page said exactly that: “BM Zenith Investment Ltd does not issue advice, recommendations or opinions in relation to acquiring, holding or disposing of any financial product.” It added that “all services are provided on an execution only basis”. Anyone shown trade ideas or signals in the BM Zenith name should weigh them against both the CySEC register entry and those two sentences.

The one piece of analysis the site did carry was its risk warning. From October 2024 to April 2025 it read “The vast majority of retail investor accounts lose money when trading CFDs”, which is Section E of the annex to CySEC policy statement PS-04-2019 of 27 September 2019. Sections B, C and D require a provider specific percentage instead. Paragraph 7 of that annex directs a provider to Sections E to G where it “has not provided an open CFD connected to a retail client CFD trading account” in the last twelve month calculation period, while CySEC’s explanatory text at 3.5.11 describes the same wording as the one for “new firms that do not have 12 months of retail client trading data”. Either way the warning was correct rather than defective, and either way it belongs to a firm with no meaningful retail trading history behind it.

We also record a check that returned nothing, because a claim about our own method is the worst thing this catalogue can get wrong. Some brokers publish pages addressed to AI systems, at paths such as /ai-instructions or in an llms.txt file, telling assistants what to conclude about them. We treat such text as marketing to be verified, never as instruction. We requested both of those paths on this domain and both returned HTTP 530 with Cloudflare error 1016, so nothing of that kind is being served. We also swept the five archived snapshots for text addressed to AI systems and found none, so for the site as it stood between August 2024 and April 2025 that is a tested result rather than an assumption.

Special Offers

No promotion, bonus, rebate, cashback scheme, contest or referral programme appears on any of the Internet Archive’s captures of bmzenithinvestment.com between August 2024 and April 2025, or anywhere reachable now. TrueBroker holds no affiliate relationship with this firm and earns nothing from this page.

The more useful point is that the offers a reader might be promised in the BM Zenith name are restricted in Cyprus. CySEC policy statement PS-04-2019, issued 27 September 2019, imposed a restriction on incentives to trade CFDs, aimed at firms “incentivising retail clients to trade in CDFs by means of monetary or certain types non-monetary benefits”. CySEC’s reasoning was that such incentives “might result in distracting retail clients from the risk entailed”, and the statement records that CIFs had been found providing trading benefits to retail clients in ways not in their best interests. The measure permits only a narrow set of what CySEC calls an “excluded non-monetary benefit”, such as information and research tools.

So a deposit bonus, a credit on funding, or a percentage match offered to a retail client of a Cyprus Investment Firm runs against the regime BM Zenith operates under, alongside the leverage caps of 30:1 on major currency pairs down to 2:1 on cryptocurrencies and the 50 percent margin close out rule from the same policy statement.

There is a sharper reason to be careful here. BM Zenith is licensed under CySEC 445/24 for class 9 CFDs, its approved domain www.bmzenithinvestment.com serves none of its own content, and its Match-Trader platform has been decommissioned. A firm in that state is not running a promotion. If you are offered a bonus, a funded account or a managed return in this name, the offer is not coming from a working retail operation at this licensee, and the questions to ask are which legal entity is making it, on which domain, and whether that domain is the one CySEC has approved.

Opening an Account

There is no route to open an account. The approved domain answers HTTP 530 with Cloudflare error 1016 rather than a registration form, and it did so on every attempt we made against both hostnames, through exits confirmed in eleven countries and from our own machine directly.

Even when the site worked there was no route. Across every archived capture from October 2024 to April 2025 there is no client login link, no registration form and no account area. The navigation ran to home, about us, our services, legal information and a contact form, and the contact page itself was never archived. The two About and Our Services links in the footer navigation are styled as buttons and carry empty link targets. This was a corporate presence rather than a place to sign up.

The practical implication deserves stating plainly. A Cyprus Investment Firm onboarding a retail client must deliver a client agreement, a risk disclosure, a conflicts of interest summary, a best execution policy, a complaints handling procedure and an Investor Compensation Fund disclosure before the relationship starts. None of those is obtainable from this firm, then or now. Anyone presenting you with an account opening link in the name of BM Zenith is therefore sending you somewhere other than the domain CySEC has approved for this licensee, and that is a fact worth stopping on.

The contact points that exist come from the regulator rather than the firm’s marketing. The register publishes a telephone number of +357 22050936 and a compliance address at [email protected]. The archived site published no email address at all, and added that same phone number only in February 2025. Note that bmzenith.com is a different domain from the approved one, is not itself on CySEC’s approved domains list, and has never served a website: it was registered in May 2023, carries Google Workspace mail records and has no address record at all.

Deposits & Withdrawals

Nothing was ever published, and for this section that gap is the finding rather than a footnote. We cannot name a single payment method, currency, processing time, minimum, maximum or fee. The archived site listed none, and there is no live site. We have left the withdrawal fee and every cost field empty rather than carry a placeholder.

What the register tells us is that the firm holds the ancillary permission for safekeeping and administration of financial instruments, including custodianship, on instrument class 9. That is the custody permission a CIF needs, and it sits alongside client money rules requiring retail client funds to be held in segregated accounts at credit institutions, separate from the firm’s own money. It also holds granting credits or loans where it is involved in the transaction, and foreign exchange services connected to the provision of investment services, which is the permission behind currency conversion on funding and on positions.

As a Cyprus Investment Firm, BM Zenith’s clients fall within the Investor Compensation Fund, the scheme that pays out if a CIF fails and cannot return client assets. Membership is mandatory rather than elective: CySEC directive DI87-07 states that CIFs “shall subscribe as members to the Fund”, and requires subscription before a firm provides any investment operations. We read the directive itself rather than a summary of it. Cover is defined as “the lower of 90% of the cumulative covered claims of the covered client and EUR 20.000”, so twenty thousand euro is the ceiling per covered client, and it applies to retail clients rather than professionals. Two caveats matter. CySEC publishes no reachable per firm membership roster, so we establish membership from the directive plus the firm’s verified CIF status rather than from a named list entry. And compensation only becomes relevant if the firm fails and cannot return assets, which is a different question from whether it is currently trading.

There is no user withdrawal record to weigh in either direction, and the reason is now documented rather than assumed. The firm’s own archived risk warning used CySEC’s standard wording, which under PS-04-2019 is required of a provider that has had no open retail CFD position for twelve months. Taken with the absence of any login area and a platform that only appeared in August 2025, the evidence points to a firm that had very few retail clients trading, if any. That is an absence of evidence about payments and not evidence of good conduct. A firm with no reachable client base generates no complaints for the same reason it generates no testimonials.

Customer Support

Two contact points exist and both come from the CySEC register rather than from the firm. The register publishes a telephone number of +357 22050936 and an email address of [email protected] against BM Zenith Investment Limited, with a registered office at Stasikratous 37, Center point tower, Flat/Office 802, 1065 Nicosia, Cyprus. The firm’s own archived site gave the same address and, from February 2025, the same phone number written as 00357 22050936. It never published an email address at all, offering only a contact form on a page the Internet Archive did not capture.

The mail infrastructure behind those addresses is configured and live, which is more than can be said for the websites. The approved domain carries Microsoft 365 mail records and a Microsoft domain verification record, and a mail host resolves on it. The register’s contact domain bmzenith.com carries Google Workspace mail records and a matching sender policy, yet has no address record and no certificate has ever been issued for it, meaning it was set up to handle email and never to serve a website.

Beyond that there is nothing. No support hours, no live chat, no ticketing system, no local numbers and no named complaints contact were ever published. The archived site was English only with no language switcher. A complaints procedure is something a CIF must maintain and disclose, and a client who could not resolve a complaint with the firm would ordinarily escalate to the Financial Ombudsman of the Republic of Cyprus. We could not verify the firm’s own procedure, because the document that would set it out was never published.

We have not telephoned the number or written to the compliance address. Our support scoring rests on what a prospective client can discover and use unaided, and on that measure a regulator published landline and a compliance mailbox are a thin substitute for a support function. They are a way to reach a legal entity, not a way to get help with an account.

Prohibited Countries

We have no evidence of any restricted country list for BM Zenith, and we are not going to construct one.

The firm published no terms of business, no client agreement and no jurisdiction notice, on the archived site or since. A genuine restriction has to come from the firm’s own words or from a regulator’s prohibition, and neither exists here.

One trap deserves naming, because it is easy to fall into and it inverts the source. Many CySEC entity records carry a block headed “Provision of Services to Countries Outside EU”. That block lists the countries a firm may serve, not the countries it excludes, and CySEC prints its own explanation above it noting that CIFs may provide services to countries outside the EU provided they comply with the third country’s regulatory regime. Publishing it as a restriction list would tell a reader in Indonesia or South Africa that they are shut out of a firm specifically cleared to take them. For BM Zenith the question does not arise, because its register record carries no such block at all.

We are equally careful about what the register does not say. The Tied Agents and Branch sections on a CySEC entity page are empty for every firm we compared, including much larger licensees, so their emptiness on this record proves nothing. What we can say, sourced to ESMA rather than to CySEC, is that ESMA’s investment firm register holds only a head office record for BM Zenith and no branch record, and that the same register does carry branch records for other Cypriot firms, so the absence is meaningful there.

As a Cyprus Investment Firm, BM Zenith holds an EU authorisation, and the practical limit on where it may operate is the ordinary one: EU passporting where notified, and third country rules elsewhere. We are not reporting a passporting position either way, because the section of the CySEC page that looks like one is a hidden template block for a different product type and not a passporting disclosure. None of this is a claim that the firm is confined to Cyprus.

Conclusion

BM Zenith Investment Limited is a real, currently licensed Cyprus Investment Firm whose retail operation has stopped. Both halves of that sentence matter, and most sources will give you only one of them.

The regulatory half is clean and verifiable, and it is stronger than the dead website would lead you to expect. CySEC licence 445/24 is on the current register, dated 17 June 2024, against the exact legal name, with Cyprus company number HE 406814. CySEC’s approved domains list maps bmzenithinvestment.com to this licensee and no other, and the firm’s own archived legal text names the same domain, the same licence number and the same Nicosia address. ESMA carries the firm as Active. The Cyprus Registrar of Companies lists it as Registered, incorporated in February 2020, still filing, with its file updated on 13 July 2026. We swept 3,161 CySEC board decisions, announcements and administrative sanctions and found no entry against it, and the FCA register holds no clone on the name. The permissions are narrow and honestly narrow: class 9 only, which is contracts for differences, on order transmission and execution. It holds no dealing on own account permission, so unlike most CFD firms it was never allowed to take the other side of a client trade.

The operating half is where a reader should stop. The approved domain returned Cloudflare error 1016 on every one of the 22 proxied country and hostname pairs we tried, from exits independently confirmed in all eleven countries, and on every direct probe. The Match-Trader platform that ran on platform.bmzenithinvestment.com from about August 2025 has been decommissioned and its subdomain now points at a host that does not resolve. The only responding web application is a Cloudflare Access gated CRM that refuses the public. Mail is configured on two domains, one of which has never served a website. Certificates and registration are still being renewed, most recently on 14 July 2026, and the zone still carries Cloudflare’s managed robots.txt, which is an opt in setting rather than a default. Read together with the registrar filings, this is not a collapsed company. It is a live, compliant, filing entity whose customer facing machinery has been switched off, and the gap between those two facts is unexplained by anything either the firm or the regulator has published.

The firm’s own risk warning points the same way, though it proves less than it first appears to. It used CySEC’s standard wording rather than a provider specific percentage, a format the regulator prescribes both for a provider with no open retail CFD position in the previous twelve months and, in its own explanatory text, for new firms without twelve months of retail client trading data. BM Zenith qualified as a newcomer regardless, so the wording is consistent with little or no retail activity without establishing it. Read alongside a brochure with no login, no prices and no platform, and a trading platform that appeared only in late 2025 and is already gone, the picture is of a licence that was obtained and a business that never really started.

Our score of 4.6 out of 10 reflects that split. Regulation scores well because the licence is real, current and precisely matched to entity and domain, corroborated at ESMA and the company registrar, and backed by a clean enforcement record across every CySEC decision, announcement and sanction we swept. Fees and user reviews are scored neutrally because there is genuinely no data, and we do not penalise a firm for facts we could not gather. Platform and support score low on evidence rather than on absence: we tested and found a decommissioned platform, no client area and no support function.

Who this suits is easy to answer. Nobody can use this firm today, because there is no way to reach it as a client. If you have been contacted by someone trading on this name, the checks that matter are that the only domain CySEC approves for it is bmzenithinvestment.com, that this domain currently serves none of the firm’s own content, and that an account opening link pointing anywhere else is not this licensee’s approved domain. If the business returns, the first questions are who executes your orders given the firm cannot deal on own account, and where the terms of business, best execution policy and Investor Compensation Fund disclosure can be read.

FAQ